Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/QirINLcm_xUQ1D-l5vr39I0gmyc.roa
File:                     QirINLcm_xUQ1D-l5vr39I0gmyc.roa (raw, json)
Hash identifier:          veL2XugqDhskVUX5Es/QIx+X7Dvls8qlPzbuy7pWIRk=
Subject key identifier:   42:2A:C8:34:B7:26:FF:15:10:D4:3F:A5:E6:FA:F7:F4:8D:20:9B:27
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       078B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QirINLcm_xUQ1D-l5vr39I0gmyc.roa
Signing time:             Tue 31 Mar 2026 07:41:38 +0000
ROA not before:           Tue 31 Mar 2026 07:41:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        111.98.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1931 (0x78b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=422AC834B726FF1510D43FA5E6FAF7F48D209B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ea:74:51:04:30:df:97:34:3e:6a:2e:de:c7:
                    0b:95:79:85:00:f9:c4:3c:8f:75:30:10:32:64:f9:
                    5e:b0:58:9f:f5:e6:ad:0c:17:87:02:99:05:f2:a4:
                    56:64:85:04:9d:48:cb:56:a7:24:fe:9f:4b:98:72:
                    df:e5:07:5f:51:42:4b:4c:05:9a:49:5e:06:ea:e9:
                    a3:87:c9:e5:fd:37:5a:29:3e:96:ec:17:47:fb:ae:
                    f0:b0:cd:ec:1e:b7:36:78:c0:4d:7b:6f:c3:b3:cd:
                    6a:00:42:72:a9:b2:a0:a7:d5:ef:6d:f4:a4:de:45:
                    0a:1e:2d:46:33:d6:6f:01:a2:05:e2:0c:1f:64:06:
                    9a:72:ce:ac:d5:d6:31:a4:0e:a3:32:91:d6:bb:94:
                    2d:68:54:19:44:89:6c:4a:16:bf:97:2d:d1:1b:f7:
                    52:23:0d:d7:25:95:5c:ad:33:aa:92:22:ed:c5:1b:
                    df:94:b4:27:ee:c1:53:36:9b:e1:89:0a:af:ee:21:
                    0d:7a:f1:66:32:bc:d5:70:18:d9:98:8a:0e:ae:eb:
                    54:dd:63:71:ce:1d:87:9e:96:04:e6:89:a2:55:87:
                    fb:99:58:1e:ed:a2:e4:a5:e7:77:ae:bc:9e:79:57:
                    ac:71:77:e9:08:25:66:04:d0:4a:5b:f4:43:a0:81:
                    d2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2A:C8:34:B7:26:FF:15:10:D4:3F:A5:E6:FA:F7:F4:8D:20:9B:27
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QirINLcm_xUQ1D-l5vr39I0gmyc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.98.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         19:02:b5:d8:d6:4c:6f:3d:3f:d3:2c:77:7f:da:60:4b:ac:22:
         e0:70:e4:96:e3:7f:68:7c:09:b4:80:ff:bc:da:89:c0:a5:89:
         7e:47:1a:f7:ac:33:27:a5:b6:6a:15:24:ea:2f:49:7f:09:a3:
         3b:c6:60:5b:f7:f9:4d:06:7b:a6:db:c6:53:5a:7a:80:b0:2d:
         7d:29:2a:f7:55:2b:95:f8:a8:2c:c1:c4:55:4b:67:c3:cd:cc:
         8c:65:f5:27:48:c3:78:4e:47:84:51:7c:3b:43:50:04:b6:43:
         c4:e2:e5:8d:f6:1d:43:0a:d1:1d:7b:7e:c8:75:f4:12:4f:bf:
         e9:e2:af:ab:1d:e0:07:3d:37:c2:a0:64:be:40:a3:f4:82:6c:
         46:4d:73:fc:ca:c3:60:5a:7c:87:92:46:3b:95:6f:df:09:d9:
         84:d5:0b:22:71:24:87:48:e3:2a:2d:7a:15:88:87:d5:da:c6:
         20:85:6d:58:e9:d3:1f:85:9a:6d:d6:e1:a5:70:ad:64:40:ef:
         be:ee:34:67:7c:47:50:2b:53:09:6f:8a:a3:55:31:02:33:cd:
         95:11:0b:49:ad:50:42:f2:0b:ba:45:c0:8b:b6:c5:ed:f4:e3:
         ef:95:38:f5:c4:21:fd:b5:5b:34:81:87:d9:ef:f6:93:36:59:
         f0:d6:7d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:34 2026 by rpki-client